Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-xphf-cx8h-7q9g: `openssl` `X509StoreRef::objects` is unsound

This function returned a reference into an OpenSSL datastructure, but there was no way to ensure OpenSSL would not mutate the datastructure behind one’s back.

Use of this function should be replaced with X509StoreRef::all_certificates.

ghsa
#git#ssl

`openssl` `X509StoreRef::objects` is unsound

Moderate severity GitHub Reviewed Published Nov 28, 2023 to the GitHub Advisory Database • Updated Nov 28, 2023

ghsa: Latest News

GHSA-pjwm-cr36-mwv3: ReDoS in giskard's transformation.py (GHSL-2024-324)